Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FFJ257cuWQvQOnyedneEzTkSEbg.roa
File: FFJ257cuWQvQOnyedneEzTkSEbg.roa (raw, json)
Hash identifier: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=
Subject key identifier: 14:52:76:E7:B7:2E:59:0B:D0:3A:7C:9E:76:77:84:CD:39:12:11:B8
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA55C5E4AAE88B5868943924F22B7D
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FFJ257cuWQvQOnyedneEzTkSEbg.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202965
IP address blocks: 178.175.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:c5:e4:aa:e8:8b:58:68:94:39:24:f2:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=145276e7b72e590bd03a7c9e767784cd391211b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:96:87:ba:80:3c:b0:c8:0e:17:72:a6:e3:
5b:44:de:a4:84:4f:b5:e9:ea:2d:28:a0:2b:d2:85:
d0:e5:b1:08:02:77:0d:c9:21:23:5e:90:58:60:96:
09:da:58:32:8c:45:ae:43:5a:5e:23:a2:5b:1a:14:
71:b2:ae:45:6e:d0:c5:40:e5:1b:a1:c5:a3:f9:a3:
91:fe:86:e7:a0:dc:a2:6b:f4:42:a9:1c:10:08:af:
1f:7c:b0:86:99:a6:d4:cf:e8:de:42:cb:03:3b:be:
07:47:35:ef:c6:51:48:12:8c:2e:fc:ed:08:62:56:
f4:40:5d:55:6d:39:c7:b8:52:e3:6a:ee:30:36:24:
d4:1b:ec:41:69:5b:5a:6f:37:d5:28:b3:7b:d8:9e:
41:4a:af:36:5a:05:50:a8:e6:53:d6:a3:59:90:b9:
c8:5f:13:42:5f:64:b7:83:2f:2f:d7:7a:a7:4c:04:
6d:3b:0b:ed:b1:f0:ab:eb:c7:31:bd:c5:c7:76:72:
fc:91:8e:eb:a0:9c:d9:39:c5:e2:80:dc:61:5d:60:
93:6e:d6:d3:e4:36:1d:b3:04:29:62:7f:0f:d1:db:
68:46:22:e3:ba:3a:49:6a:57:42:8b:29:f9:bb:21:
49:1b:79:24:8e:a5:95:ae:76:8a:fa:81:4f:45:a0:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:76:E7:B7:2E:59:0B:D0:3A:7C:9E:76:77:84:CD:39:12:11:B8
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/FFJ257cuWQvQOnyedneEzTkSEbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fb:17:fb:76:90:10:1b:65:4d:6f:65:ef:c7:b8:40:f5:50:
4f:92:27:02:e8:c4:a4:66:85:e3:e3:85:fb:ce:a0:e4:6c:2e:
b5:44:c1:57:1e:52:f5:3c:91:4f:70:9d:6c:6a:63:db:d8:2d:
eb:89:8c:e2:90:f7:1e:d2:f6:11:78:38:e3:1f:c8:5d:7b:90:
c8:26:06:4e:ba:44:3e:d0:98:dd:8c:60:ce:0f:79:0e:cb:0a:
77:2a:63:55:79:bd:63:b8:09:af:4c:3a:f0:4d:b5:f0:72:43:
2d:83:21:35:37:0d:1b:6e:55:f7:16:c2:86:8d:f8:8e:c7:c4:
57:3b:72:18:01:92:3f:be:27:66:9d:cb:c4:d6:a2:e0:ee:53:
78:a0:8c:ae:df:c6:57:d7:a5:a8:05:c4:d3:40:5c:6a:dd:eb:
91:88:a8:de:c6:96:fa:0c:51:d0:b5:13:55:e1:a3:80:51:50:
24:c1:4e:1e:a7:4a:1c:40:d9:8f:b5:ed:d9:e1:9e:77:67:32:
30:4a:ad:6f:41:9e:a4:19:2a:6b:7d:24:21:81:d0:a3:17:b2:
c0:6f:4a:b1:91:09:32:58:50:a3:45:e1:cb:56:af:e8:36:3d:
6c:7b:fb:07:94:01:75:79:b7:7b:eb:7b:fb:aa:96:fb:60:6f:
17:5c:f9:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lXF5Kroi1holDkk8it9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUyNzZlN2I3MmU1OTBiZDAzYTdjOWU3Njc3ODRjZDM5MTIxMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2WWh7qAPLDIDhdypuNbRN6khE+1
6eotKKAr0oXQ5bEIAncNySEjXpBYYJYJ2lgyjEWuQ1peI6JbGhRxsq5FbtDFQOUb
ocWj+aOR/obnoNyia/RCqRwQCK8ffLCGmabUz+jeQssDO74HRzXvxlFIEowu/O0I
Ylb0QF1VbTnHuFLjau4wNiTUG+xBaVtabzfVKLN72J5BSq82WgVQqOZT1qNZkLnI
XxNCX2S3gy8v13qnTARtOwvtsfCr68cxvcXHdnL8kY7roJzZOcXigNxhXWCTbtbT
5DYdswQpYn8P0dtoRiLjujpJaldCiyn5uyFJG3kkjqWVrnaK+oFPRaC11wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRSdue3LlkL0Dp8nnZ3hM05EhG4MB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvRkZKMjU3Y3VXUXZRT255ZWRuZUV6VGtTRWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+XMA0G
CSqGSIb3DQEBCwUAA4IBAQA++xf7dpAQG2VNb2Xvx7hA9VBPkicC6MSkZoXj44X7
zqDkbC61RMFXHlL1PJFPcJ1samPb2C3riYzikPce0vYReDjjH8hde5DIJgZOukQ+
0JjdjGDOD3kOywp3KmNVeb1juAmvTDrwTbXwckMtgyE1Nw0bblX3FsKGjfiOx8RX
O3IYAZI/vidmncvE1qLg7lN4oIyu38ZX16WoBcTTQFxq3euRiKjexpb6DFHQtRNV
4aOAUVAkwU4ep0ocQNmPte3Z4Z53ZzIwSq1vQZ6kGSprfSQhgdCjF7LAb0qxkQky
WFCjReHLVq/oNj1se/sHlAF1ebd763v7qpb7YG8XXPnj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:43 2025 by rpki-client